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CLAIMS 

is claimed is: 

A computer-implemented method for managing risk related to a security risk event, the 
method comprising: 

receiving information relating to a security risk event; 

structuring the information received according to risk variables; and 

calculating a security level using the structured information and a set of relationships 

established between the risk variables. 

The method of claim 1 wherein the security level comprises an indication of an amount 
of risk that a breach of security may occur relating to the security risk event. 

The method of claim 1 wherein the security level comprises a security confidence level 
indicative of how secure a particular facility can be made relative to a particular security 
risk event. 

The method of claim 1 wherein the security level comprises a security confidence level 
can be indicative of how secure a particular practice can be made relative to a particular 
security risk event. 

The method of claim 1 wherein the security level comprises a security maintenance level 
indicative of a level of security that should be maintained in relation to an analyzed 
security risk event. 

The method of claim 1 additionally comprising the step of: 

generating a suggested security measure according to the security level and structured 

information. 
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The method of claim 6 additionally comprising the step of: 

storing the information received, the security level and the suggested security measure. 

The method of claim 6 additionally comprising the step of: 
receiving information relating to security measures executed; and 
generating a security diligence report. 

The method of claim 8 wherein the security diligence report comprises inquiries made 
relating to the security risk event and security measures executed responsive to the 
security level. 

The method of claim 6 wherein the suggested security measure comprises physical 
protection of media containing information relating to the transaction. 

The method of claim 1 wherein the suggested security measure comprises physical 
protection of a facility associated with the security risk. 

The method of claim 1 wherein the wherein the suggested security measure comprises 
physical protection of a building associated with a business transaction. 

The method of claim 1 wherein the suggested action comprises notifying an authority 
regarding potential breach of security. 

The method of claim 6 additionally comprising the step of: 

branding the suggested security measure according to the set of relationships between the 
risk variables. 

The method of claim 1 wherem level of analysis utilized in the calculation of the security 
level is rated according to a classification. 
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The method of claim 1 wherein the calculation comprises a level of weighting associated 
with a category of risk variables. 

The method of claim 1 wherein the calculation comprises aggregating multiple 
weightings of risk variables. 

The method of claim 1 wherein the calculation comprises a relationship algorithm that 
determines which variables effect other variables. 

The method of claim 1 wherein the calculation includes a relationship algorithm 
comprising how data comprising a first variable can effect a weighting for a second 
variable. 

The method of claim 1 additionally comprising the step of: 
recalculating the security level responsive to new information received. 

The method of claim 1 additionally comprising the step of: 

recalculating the security level responsive to progression of a chronology of events. 

A computerized system for managing risk related to a security risk event, the system 
comprising: 

a computer server accessible with a system access device via a conmiunications network; 
and 

executable software stored on the server and executable on demand, the software 

operative with the servo: to cause the system to: 

receive information relating to a security risk event; 

structure the information received according to risk variables; and 

calculate a security level using the structured information and a set of relationships 

established between the risk variables. 
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1 23. 



The computerized system of claim 22 wherein Ae data is gathered via an electronic feed 



1 24. Computer executable program code residing on a computer-readable medium, the 

2 program code comprising instructions for causing the computer to: 

3 receive information relating to a security risk event; 

4 structure the information received according to risk variables; and 

5 calculate a security level using the structured information and a set of relationships 

6 established between the risk variables, 

1 25. A computer data signal embodied in a digital data stream comprising data relating to risk 

0 2 management, wherein the computer data signal is generated by a method comprising the 
i:^ 3 steps of: 

•Site ^ 

]!} 4 receiving information relating to a security risk event; 

1 M 5 structuring the information received according to risk variables; and 

r ] 6 calculating a security level using the structured information and a set of relationships 

7 established between the risk variables. 

pj 1 26. A method of interacting with a network access device so as to manage risk relating to a 

2 risk subject, the method comprising the steps of: 

3 initiating interaction with a security risk management server via a communications 

4 network; 

5 inputting information desmptive of a security risk event; 

6 transmitting the information descriptive of security risk event to a security risk 

7 management server; and 

8 receiving a security level calculated using the information descriptive of a security risk 

9 event and a set of relationships established between risk variables associated with the 
1 0 information descriptive of a security risk event. 

1 27. The mettiod of claim 35 wherein the risk event is a financial transaction. 
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The method of claim 26 additionally comprising the step of receiving a suggested 
security measure according to the security level and structured information. 
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